summaryrefslogtreecommitdiff
path: root/src/db/sysdb_subdomains.c
AgeCommit message (Collapse)AuthorFilesLines
2013-02-10Change the way domains are linked.Simo Sorce1-101/+66
- Use a double-linked list for domains and subdomains. - Never remove a subdomain, simply mark it as disabled if it becomes unused. - Rework the way subdomains are refreshed. Now sysdb_update_subdomains() actually updates the current subdomains and marks as disabled the ones not found in the sysdb or add new ones found. It never removes them. Removal of missing domains from sysdb is deferred to the providers, which will perform it at refresh time, for the ipa provider that is done by ipa_subdomains_write_mappings() now. sysdb_update_subdomains() is then used to update the memory hierarchy of the subdomains. - Removes sysdb_get_subdomains() - Removes copy_subdomain() - Add sysdb_subdomain_delete()
2013-02-10Remove sysdb_subdom completelySimo Sorce1-19/+5
struct sss_domain_info is always used to represent domains now. Adjust tests accordingly.
2013-02-10Add sysdb_subdomain_store() functionSimo Sorce1-37/+98
Replaces sysdb_add_subdomain_attributes and is a public sysdb interface.
2013-02-10Refactor sysdb_master_domain_add_info()Simo Sorce1-24/+19
2013-02-10Update main domain info in placeSimo Sorce1-32/+29
2013-02-10Avoid sysdb_subdom in sysdb_get_subdomains()Simo Sorce1-55/+35
2013-01-15Stop creating fake sysdb contextsSimo Sorce1-20/+0
Now that the sysdb context does not contain anymore domain related data we can simply stop creating faxe sysdb context and just reference the parent context.
2013-01-15Kill sysdb->domainSimo Sorce1-2/+0
Finally remove this upside-down dependency.
2013-01-15Move mpg flag to the domain where it belongsSimo Sorce1-1/+0
A sysdb contains now multiple domains, but the mpg property is a property of a specific domain not of the underlying database.
2013-01-15Add domain to some subdomain functionsSimo Sorce1-5/+6
2013-01-15Add domain argument to sysdb_delete_group()Simo Sorce1-15/+0
Also remove sysdb_delete_domgroup()
2013-01-15Add domain argument to sysdb_delete_user()Simo Sorce1-8/+0
Also remove sysdb_delete_domuser()
2013-01-15Add domain argument to sysdb_store_group()Simo Sorce1-13/+0
Also remove sysdb_store_domgroup()
2013-01-15Add domain argument to sysdb_store_user()Simo Sorce1-18/+0
Also remove sysdb_store_domuser()
2013-01-15Add domain to sysdb_search_group_by_gid()Simo Sorce1-11/+0
Also remove unused sysdb_search_domgroup_by_gid()
2013-01-15Add domain to sysdb_search_group_by_name()Simo Sorce1-12/+0
Also remove unused sysdb_search_domgroup_by_name()
2013-01-15Add domain to sysdb_search_user_by_uid()Simo Sorce1-11/+0
Also remove unused sysdb_search_domuser_by_uid()
2013-01-15Add domain to sysdb_search_user_by_name()Simo Sorce1-11/+0
Also remove unused sysdb_search_domuser_by_name()
2013-01-15Pass domain to sysdb_get<pw/gr>nam() functionsSimo Sorce1-40/+0
Also allows us to remove sysdb_subdom_get<pw/gr>nam() wrappers and restore fqnames proper value in subdomains, by testing for a parent domain being present or not.
2012-11-20LDAP: Only convert direct parents' ghost attribute to memberJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1612 This patch changes the handling of ghost attributes when saving the actual user entry. Instead of always linking all groups that contained the ghost attribute with the new user entry, the original member attributes are now saved in the group object and the user entry is only linked with its direct parents. As the member attribute is compared against the originalDN of the user, if either the originalDN or the originalMember attributes are missing, the user object is linked with all the groups as a fallback. The original member attributes are only saved if the LDAP schema supports nesting.
2012-11-19Refactor the way subdomain accounts are savedSimo Sorce1-0/+40
The original sysdb code had a strong assumption that only users from one domain are saved in the databse, with the subdomain feature, we have changed reality, but have not adjusted all the code arund the sysdb calls to not rely on the original assumption. One of the side effects of this incongrunece is that currently group memberships do not return fully qualified names for subdomain users as they should. In oreder to fix this and other potential issues surrounding the violation of the original assumption, we need to fully qualify subdomain user names. By savin them fully qualified we do not risk aliasing local users and have group memberhips or other name based matching code mistake a domain user with subdomain usr or vice versa.
2012-10-01sysdb_master_domain_get_info: fix copy-and-paste errorSumit Bose1-2/+2
2012-09-10SYSDB: NULL-terminate the output of sysdb_get_{ranges,subdomains}Jakub Hrozek1-1/+3
2012-09-04Unify usage of sysdb transactions (part 2).Michal Zidek1-3/+3
2012-08-01Change refreshing of subdomainsSimo Sorce1-6/+7
This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
2012-08-01Add realm paramter to subdomain listSimo Sorce1-0/+58
This will be used later for setting domain_realm mappings in krb5.conf
2012-08-01Fix return error and debug messageSimo Sorce1-2/+7
The debuf message was trying to print the number of returned entries, but no integer was provided. Return ENOENT as the error for when there are no entries, not EINVAL.
2012-08-01Use ldb_msg_add_string with bare stringsSimo Sorce1-9/+7
2012-08-01Fix wrong elements used in comparisonSimo Sorce1-2/+2
2012-08-01Fix double semi-colonsSimo Sorce1-5/+5
2012-08-0180 columns policeSimo Sorce1-8/+13
2012-08-01Change subdomain_infoSimo Sorce1-12/+12
Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
2012-06-10IPA subdomains - ask for information about master domainJan Zeleny1-0/+166
The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain.
2012-04-24Sysdb routines for subdomainsJan Zeleny1-0/+435